Terms of Use, Privacy Policy and Cookie Policy
Here you will find the terms for using qrvibes.com, our privacy policy and information about cookies.
Last updated: 21 October 2026
Terms of Use
1. Scope
These terms of use apply to the use of the website qrvibes.com, including all its language versions (e.g. de.qrvibes.com), and the QR code and barcode scanner and generator offered on it. By using the website, you agree to these terms.
2. Free of charge, account optional
Scanning and creating QR codes and barcodes is free of charge and possible without registration. A user account is optional and is only needed to save created codes. There is no entitlement to any particular function or to the website being available at all times. We may change, restrict or discontinue the service at any time; we will inform registered users in good time before saved codes are deleted as a result.
3. Permitted use
You are responsible for the content you encode in QR codes or barcodes. It is not permitted to use qrvibes.com to create codes that lead to illegal content, infringe the rights of others, or are used for fraud, phishing or the distribution of malware. We may delete codes and user accounts that violate these rules.
If a dynamic QR code from qrvibes.com leads to fraudulent or dangerous content, we may show a warning page before forwarding or block the code. You can report suspicious codes to us using the report form.
4. No guarantee
We create the QR codes and barcodes with care and check their readability in the preview, but we cannot guarantee that every code can be read by every device, especially with low contrast, a large logo or small print sizes. Please test your code with several devices before printing it.
The notes we display for scanned links (e.g. on unencrypted connections or unusual domain names) are simple automatic checks. They do not replace your own judgement and are no guarantee that a link is safe.
5. User account
Please keep your password secret. You can delete your account and all saved codes at any time under “My codes”.
Dynamic QR codes only work as long as the code exists in your account. If you delete the code or your account, printed copies lead to a notice that the code is no longer active. We may deactivate dynamic codes that forward to illegal content, phishing or malware.
6. Copyright
Unless otherwise stated, the contents of this website are protected by copyright; reproduction, publication or commercial reuse is only permitted with prior permission. You may use the QR codes and barcodes you create without restriction, including commercially.
This does not apply to the open-source libraries, fonts, flag graphics and icons used. They are subject to their own licenses, which are listed in the imprint under Open-source licenses.
7. Links to other websites
We accept no liability for the content of linked third-party websites, including links contained in scanned QR codes and barcodes. The respective operator is responsible.
8. Applicable law
The law of the Federal Republic of Germany applies. Mandatory consumer protection provisions of the country in which you have your habitual residence remain unaffected.
9. Severability clause
Should any provision of these terms of use be or become invalid, the validity of the remaining provisions shall not be affected.
10. Changes
We may adapt these terms of use, for example if the website or legal requirements change. The version published here applies.
Privacy Policy
1. Controller
The controller responsible for data processing on this website (qrvibes.com and its language versions such as de.qrvibes.com) within the meaning of the General Data Protection Regulation (GDPR) is:
Christoph Neumüller
Steinweg 1
94569 Stephansposching
Germany
Email: info@qrvibes.com
Further details can be found in the Imprint.
2. General information
This website is deliberately designed to process as little data as possible. Scanning and creating QR codes and barcodes takes place entirely in your browser; camera images, uploaded pictures and the content of your codes are not sent to us. A user account is voluntary and is only needed to save codes (see section 7). We do not show advertising and do not embed any third-party content; for anonymous visitor statistics we use self-hosted Matomo without cookies (see section 9). Fonts, scripts and graphics are loaded from our own web server.
3. Hosting and server log files
This website is hosted by:
DreamHost, LLC
PMB #327, 417 Associated Rd.
Brea, CA 92821
USA
The servers are located in the USA (data centre region US-East, Ashburn, Virginia). When you visit the website, your browser automatically sends information to the server, which may be stored in so-called server log files. This includes:
- IP address of the requesting device
- date and time of access
- page or file requested
- amount of data transferred and HTTP status code
- referrer URL (the previously visited page)
- browser and operating system used (user agent)
This processing takes place in order to provide the website technically and to ensure its security and stability (e.g. to fend off attacks). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in operating the website securely and without errors. The log files are automatically deleted by the host after 7 days, unless they are needed for longer to investigate a security incident.
The database with user accounts and saved codes (section 7) is also operated by our host. A data processing agreement pursuant to Art. 28 GDPR has been concluded with DreamHost.
Transfer to a third country (USA): Since our host’s servers are located in the USA, all data arising from the use of the website – in particular the server log files and, if you have an account, your account data and saved codes – is processed in the USA. The USA is a third country outside the European Union. The transfer is based on the standard contractual clauses adopted by the EU Commission (Art. 46 (2) (c) GDPR), which form part of the data processing agreement with DreamHost.
You can request a copy of the standard contractual clauses from us at the address given in section 1.
4. Encryption (SSL/TLS)
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar. Passwords and all other entries are therefore transmitted in encrypted form.
5. Scanning QR codes and barcodes
To scan with your camera, the website asks for permission to use your camera. The camera only starts when you click “Start camera”, and you can revoke the permission in your browser at any time. The camera image is analysed exclusively in your browser on your device; no images or video are transmitted to us or to third parties.
The same applies to images you select, drag onto the page or paste: they are read only in your browser and are not uploaded.
If you open a link contained in a scanned code, you leave our website. The operator of the target website is then responsible for data processing there.
6. Creating QR codes and barcodes
QR codes and barcodes are created in your browser. The content you enter (e.g. links, texts, Wi-Fi data, contact or bank details) and a logo you may add are not transmitted to us, unless you actively save the code in your user account (section 7). The same applies to lists and CSV files for the bulk generator: they are processed only in your browser and are not uploaded.
7. User account and saved codes
You can optionally create a user account to save your codes and edit them later. We process the following data:
- name and email address
- password – stored only as a secure hash value, never in plain text
- selected language, date of registration and of the last sign-in
- the codes you save: name, content, form entries, design settings and, if added, the logo image
The purpose is to provide the user account and the saving function you have requested. The legal basis is Art. 6 (1) (b) GDPR (performance of the contract of use). Your data is stored until you delete your account. You can delete individual codes or your entire account with all codes at any time under “My codes”; deletion takes effect immediately. There you can also download all your data as a file (Art. 20 GDPR).
Protection against misuse: To protect accounts against password guessing, we store failed sign-in attempts, registrations, password reset requests and replies sent via reply forms together with the IP address and, where applicable, the email address entered, for a maximum of 24 hours. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the security of the user accounts.
Dynamic QR codes and scan statistics: If you create a dynamic code or a code with scan statistics (the two can be chosen independently), the code contains a short address on our server (e.g. qrvib.es/AbC23xyz), and we store the destination you entered. When someone scans the code, our server forwards them to this destination. Only if you switch on scan statistics for the code do we count how many scans there were per day and how many of them came from mobile devices. We do not store IP addresses, do not set cookies and do not create profiles of the people scanning; the technical server log files described in section 3 are created as with every website visit. The legal basis for the forwarding and the statistics is Art. 6 (1) (b) GDPR towards you as account holder and Art. 6 (1) (f) GDPR towards the people scanning (our legitimate interest lies in providing the forwarding you requested). The statistics are deleted together with the code.
Reports of suspicious QR codes: Using the form in the scanner, you can report QR codes that lead to fraudulent or dangerous sites. A selected photo is only read in your browser and is not transmitted to us. We store the address or content of the code, the selected reason, your message and, if provided, your email address in order to review the report and ask follow-up questions if needed. To protect the form against misuse, your IP address is stored for no longer than 24 hours. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in protecting users from fraud. Reports are deleted once they have been handled and are no longer needed.
Reply forms (RSVP): Account holders can create a reply form for an invitation. Guests who scan the code enter their name, whether they will attend, the number of people, menu choices and an optional message. We store this data for the person who created the invitation, who can view, export and delete it. The legal basis is Art. 6 (1) (b) GDPR towards the account holder and Art. 6 (1) (f) GDPR towards the guests (our legitimate interest lies in providing the reply function requested by the hosts). Reply forms and all replies are deleted automatically 12 months after the event date at the latest, or earlier if the account holder deletes them. The reply form sets no cookies.
Templates: Print templates are created in your browser. Texts, photos and logos you enter are only transmitted to us if you save the template in your user account.
Password reset: If you request a new password, we send you an email with a link that is valid for one hour. The email is sent via the mail server of our host.
8. Local storage in the browser
So that you can quickly call up recently scanned codes again, the website stores up to ten recently scanned codes in your browser’s local storage (localStorage, key qrvibes_history). This data remains exclusively on your device and is not transferred to us. You can remove it at any time using the “Clear” button or by deleting the website data in your browser.
If you want to save a code but are not signed in yet, the code you are working on is temporarily kept in the browser’s session storage (sessionStorage, key qrvibes_draft) so that it is still there after signing in. It is deleted as soon as it has been restored, and at the latest when the browser tab is closed.
This storage takes place in accordance with § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as it is strictly necessary for the functions you explicitly requested. Further processing is based on Art. 6 (1) (f) GDPR.
9. Visitor statistics with Matomo
For visitor statistics we use the open-source software Matomo. Matomo runs on our own server; the data is not passed on to third parties.
Matomo is configured to collect as little data as possible: it sets no cookies and stores nothing on your device. Your IP address is shortened by two bytes before it is stored, so it can no longer be linked to you. Only the pages visited, date and time, the referring page, browser, operating system, device type, screen resolution and approximate region are recorded.
The legal basis is our legitimate interest in statistically analysing the use of the website and improving our service (Art. 6 (1) (f) GDPR). Raw data is deleted after 6 months at the latest. If your browser sends “Do Not Track”, you are not recorded. You can also object to the recording at any time by email (Art. 21 GDPR).
10. Contact form and email
If you write to us using the contact form or by email, we process your message and, if provided, your name and email address in order to handle and answer your enquiry. Name and email address are optional. Messages from the form are not stored in a database but sent to our mailbox by email.
To protect the form against misuse, your IP address is stored for no more than 24 hours. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your enquiry. If your enquiry is aimed at concluding a contract, the legal basis is Art. 6 (1) (b) GDPR. We delete your message as soon as your request has been dealt with and no statutory retention obligations prevent this.
11. Cookies
This website only uses technically necessary cookies: a session cookie that is needed for the security of forms, the selected language and staying signed in during a visit, and – only if you choose “Stay signed in” – a cookie that keeps you signed in for up to 30 days. We do not use advertising or tracking cookies, so no consent banner is needed. Details can be found in the Cookie Policy.
12. Disclosure of data
Your data is only passed on to third parties if they are the host named in section 3, who acts on our behalf, or if we are legally obliged to do so. We do not sell any data.
13. Your rights
Within the scope of the statutory provisions, you have the right at any time to:
- information about your stored personal data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure of your data (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
- withdraw consent given, with effect for the future (Art. 7 (3) GDPR)
Right to object: Insofar as we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.
Many of these rights you can exercise yourself under “My codes” (change name, download data, delete account). Otherwise, an informal message to the address given above in section 1 is sufficient.
14. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de (external link)
15. Changes to this privacy policy
We will adapt this privacy policy as soon as the website or the legal requirements change. The version published here applies.
Cookie Policy
1. What are cookies?
Cookies are small text files that are stored in your browser when you visit a website. The browser’s local storage (localStorage) and session storage (sessionStorage) work in a similar way.
2. Technically necessary cookies and storage
This website only uses entries that are required for it to function. They are stored without consent (§ 25 (2) no. 2 TDDDG):
qrvibes_sid(cookie) – session cookie for form security (protection against cross-site request forgery), the selected language and the sign-in. Deleted when you close the browser.qrvibes_remember(cookie) – only if you choose “Stay signed in” when signing in. Contains a random token that keeps you signed in. Storage period: 30 days, or until you sign out.qrvibes_history(localStorage, not a cookie) – your last up to ten scanned codes. Remains on your device until you delete it.qrvibes_draft(sessionStorage, not a cookie) – the code you are working on, while you sign in to save it. Deleted after restoring or when the tab is closed.
3. No advertising or tracking cookies
We do not use cookies for advertising, analytics or tracking, and we do not embed third-party services that set such cookies. This is why the website does not show a consent banner. Our visitor statistics (Matomo) also work without cookies, see section 9 of the privacy policy.
4. Deleting cookies
You can delete cookies and website data in your browser settings at any time or block cookies in general. Without the session cookie, forms such as sign-in will not work.